CVE-2023-4651

MediumCVSS 5.4

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

There is a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository instantsoft/icms2 prior to version 2.16.1. This may lead to unauthorized access to internal server resources.

Risk Assessment

The organization may be exposed to attacks that allow attackers to access sensitive internal data or services, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to version 2.16.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1.